[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNurgJkSojtZl2YmhSQbJjVtdCpj7xl5aClg3VxE4g4c":3,"g5a-risk:CVE-2023-20118":212},{"success":4,"data":5,"meta":209},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":83,"references":84,"referencesCount":98,"weaknesses":99,"weaknessesCount":108,"isActivelyExploited":4,"cisaInfo":109,"otxData":29,"relatedBlogPosts":111,"seoMetadata":112,"configurations":137,"relatedVendorCves":200,"notableEvents":201},"CVE-2023-20118","What is CVE-2023-20118?","A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device.\r\n\r Cisco has not and will not release software updates that address this vulnerability.   However, administrators may disable the affected feature as described in the Workarounds [\"#workarounds\"] section.\r\n\r  {{value}} [\"%7b%7bvalue%7d%7d\"])}]]","A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an au...","2023-04-13T07:15:21.08","2025-10-28T13:59:03.593",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@cisco.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N","NETWORK","LOW","HIGH","NONE","UNCHANGED",6.5,"MEDIUM",null,1.2,5.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},5.9,[],[],0.53827,[39,39,39,39,39,39,39],"High",[43,48,53,56,59,62,65,68,71,74,77,80],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"cisco","rv016_firmware","*","cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":52},"rv016","-","cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*",false,{"vendor":44,"product":54,"version":46,"criteria":55,"vulnerable":4},"rv042_firmware","cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":57,"version":50,"criteria":58,"vulnerable":52},"rv042","cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*",{"vendor":44,"product":60,"version":46,"criteria":61,"vulnerable":4},"rv042g_firmware","cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":63,"version":50,"criteria":64,"vulnerable":52},"rv042g","cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*",{"vendor":44,"product":66,"version":46,"criteria":67,"vulnerable":4},"rv082_firmware","cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":69,"version":50,"criteria":70,"vulnerable":52},"rv082","cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*",{"vendor":44,"product":72,"version":46,"criteria":73,"vulnerable":4},"rv320_firmware","cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":75,"version":50,"criteria":76,"vulnerable":52},"rv320","cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*",{"vendor":44,"product":78,"version":46,"criteria":79,"vulnerable":4},"rv325_firmware","cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":81,"version":50,"criteria":82,"vulnerable":52},"rv325","cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*",12,[85,91,93],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-sbr042-multi-vuln-ej76Pke5","Cisco",[89,90],"Mitigation","Vendor Advisory",{"url":86,"source":87,"tags":92},[89,90],{"url":94,"source":95,"tags":96},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20118","CISA",[97],"US Government Resource",3,[100],{"id":101,"name":102,"description":103,"extendedDescription":104,"status":105,"abstraction":106,"structure":107},"CWE-77","Improper Neutralization of Special Elements used in a Command ('Command Injection')","The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","Many protocols and products have their own custom command language. While OS or shell command strings are frequently discovered and targeted, developers may not realize that these other command languages might also be vulnerable to attacks.","Draft","Class","Simple",1,{"shortDescription":110,"requiredAction":110,"vulnerabilityName":110,"dateAdded":29},"",[],{"title":113,"metaDescription":114,"keywords":115,"canonicalUrl":116,"structuredData":117},"What is CVE-2023-20118? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-20118, a high severity cyber security vulnerability from 2023. High exploit probability (53.8%). A vulnerability in the we...","CVE-2023-20118, CVE-2023-20118 vulnerability, CVE-2023-20118 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, cisco security, rv016_firmware vulnerability, rv016 vulnerability, rv042_firmware vulnerability, rv042 vulnerability, rv042g_firmware vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2023-20118",{"@context":118,"@type":119,"headline":113,"description":114,"datePublished":10,"dateModified":11,"author":120,"publisher":124,"about":128,"mainEntityOfPage":132,"articleSection":135,"keywords":136},"https:\u002F\u002Fschema.org","TechArticle",{"@type":121,"name":122,"url":123},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":121,"name":122,"url":123,"logo":125},{"@type":126,"url":127},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":129,"name":6,"description":130,"additionalType":131},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":133,"@id":134},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-20118","Cybersecurity","CVE-2023-20118, CVE-2023-20118 vulnerability, CVE-2023-20118 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[138,150,160,170,180,190],{"Operator":139,"Negate":29,"Nodes":140},"AND",[141,146],{"Operator":142,"Negate":52,"CPEMatch":143},"OR",[144],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":145,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"1E1462E9-4464-492C-8B91-6E020B9DCB23",{"Operator":142,"Negate":52,"CPEMatch":147},[148],{"Vulnerable":52,"Criteria":51,"MatchCriteriaID":149,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"701E3CF5-15C0-419A-97A8-9BD2C55D74AB",{"Operator":139,"Negate":29,"Nodes":151},[152,156],{"Operator":142,"Negate":52,"CPEMatch":153},[154],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":155,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"85E01122-CD88-4096-958A-8699B2A3DC3C",{"Operator":142,"Negate":52,"CPEMatch":157},[158],{"Vulnerable":52,"Criteria":58,"MatchCriteriaID":159,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1",{"Operator":139,"Negate":29,"Nodes":161},[162,166],{"Operator":142,"Negate":52,"CPEMatch":163},[164],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":165,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"0A620D1C-1FBB-46C9-9904-1FC6342ED85E",{"Operator":142,"Negate":52,"CPEMatch":167},[168],{"Vulnerable":52,"Criteria":64,"MatchCriteriaID":169,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10",{"Operator":139,"Negate":29,"Nodes":171},[172,176],{"Operator":142,"Negate":52,"CPEMatch":173},[174],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":175,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA",{"Operator":142,"Negate":52,"CPEMatch":177},[178],{"Vulnerable":52,"Criteria":70,"MatchCriteriaID":179,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"24FC4446-22C0-4EC9-84B4-A76412680105",{"Operator":139,"Negate":29,"Nodes":181},[182,186],{"Operator":142,"Negate":52,"CPEMatch":183},[184],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":185,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"1EA568A8-286F-4588-B946-6F9C97E08BCF",{"Operator":142,"Negate":52,"CPEMatch":187},[188],{"Vulnerable":52,"Criteria":76,"MatchCriteriaID":189,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"7596F6D4-10DA-4F29-95AD-75B60F4670D6",{"Operator":139,"Negate":29,"Nodes":191},[192,196],{"Operator":142,"Negate":52,"CPEMatch":193},[194],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":195,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"F3B7DECE-18C4-45AE-AF5C-657A4795C7F0",{"Operator":142,"Negate":52,"CPEMatch":197},[198],{"Vulnerable":52,"Criteria":82,"MatchCriteriaID":199,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"3435D601-EDA8-49FF-8841-EA6DF1518C75",[],[202],{"id":203,"eventType":204,"eventTime":205,"details":206,"label":207,"color":208},"edd33e48-97d5-4973-ad58-19d600f24a42","HIGH_EPSS_DELTA","2026-06-16T04:05:12.807049+00:00","Daily EPSS score increased by 0.500 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":210,"version":211},1793214169656,"2.0",{"score":213,"band":41,"action":214,"scoredAt":215},78,"Emergency patch","2026-07-01T10:30:15.263343+00:00"]